Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/5ftKEyLBkUjL35ZOMT5gD_LqlZw.roa
File: 5ftKEyLBkUjL35ZOMT5gD_LqlZw.roa (raw, json)
Hash identifier: KtRlUcPaVvLrwa0+Mly7D4rlBbA+c91VNYhXnRtNnR0=
Subject key identifier: E5:FB:4A:13:22:C1:91:48:CB:DF:96:4E:31:3E:60:0F:F2:EA:95:9C
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 01A12AF9C8435A35339C8FF7579EB413D39C
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/5ftKEyLBkUjL35ZOMT5gD_LqlZw.roa
Signing time: Sun 11 Oct 2026 12:39:35 +0000
ROA not before: Sun 11 Oct 2026 12:39:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.100.164.0/22 maxlen: 22
212.100.165.0/24 maxlen: 24
212.100.167.0/24 maxlen: 24
212.100.172.0/22 maxlen: 22
212.100.176.0/22 maxlen: 24
212.100.176.0/24 maxlen: 24
212.100.177.0/24 maxlen: 24
212.100.179.0/24 maxlen: 24
212.100.184.0/22 maxlen: 22
212.100.185.0/24 maxlen: 24
212.100.189.0/24 maxlen: 24
212.100.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:f9:c8:43:5a:35:33:9c:8f:f7:57:9e:b4:13:d3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Oct 11 12:39:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5fb4a1322c19148cbdf964e313e600ff2ea959c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:1f:86:32:b1:70:38:42:c3:c6:30:25:62:
17:e6:9c:59:0f:cd:bf:aa:54:3d:83:1d:48:be:7d:
74:67:17:cf:72:ac:f4:3c:c8:17:02:3c:87:c5:7e:
20:c4:2c:33:7c:91:43:5c:1d:c3:e5:16:50:cb:b2:
c5:a7:f1:39:db:75:13:49:e3:45:c9:ba:bf:0f:7c:
b3:94:70:39:d6:b5:be:f9:ae:6f:75:54:1c:39:36:
ba:55:92:a8:53:bc:d1:37:ad:97:fa:52:77:fd:54:
cd:fb:d5:b7:68:60:4e:ae:f9:7d:74:e9:96:2c:20:
3c:5e:68:d1:7b:45:b1:3b:9e:26:4c:d2:4f:dd:92:
c4:4f:97:32:76:89:8d:62:c7:2d:ba:1d:fa:0c:cf:
17:5b:77:c0:a6:56:25:c3:ea:a9:e0:f8:fe:99:b4:
5e:61:10:c2:a1:37:75:86:18:f7:81:ca:59:3d:e4:
06:fd:4f:5c:80:05:d4:b2:af:a2:51:bb:74:2e:eb:
f4:78:ba:2e:7c:2d:c7:58:47:b2:2f:9d:93:4d:7e:
28:e6:70:e9:b9:09:31:fb:9c:e9:1e:a9:62:ff:73:
a4:8b:9b:d6:70:24:b9:e7:54:18:09:7b:5f:99:f5:
0b:80:b8:53:17:4b:9d:eb:a9:cc:02:4d:cc:80:2b:
10:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FB:4A:13:22:C1:91:48:CB:DF:96:4E:31:3E:60:0F:F2:EA:95:9C
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/5ftKEyLBkUjL35ZOMT5gD_LqlZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.100.164.0/22
212.100.172.0-212.100.179.255
212.100.184.0/22
212.100.189.0/24
212.100.191.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:30:db:af:39:36:ef:a1:11:6b:1c:b4:60:c6:98:0a:77:d9:
3d:ca:12:28:42:93:d1:d6:f7:c8:2b:03:d5:a4:57:8f:f3:e2:
c1:ca:d5:68:3f:98:07:15:4c:3c:c1:51:30:47:e0:63:2c:88:
a3:36:cf:d9:33:68:9d:86:30:ca:b7:6b:30:93:cc:cf:9d:c4:
1e:54:d9:c4:f0:1f:84:ec:c4:2d:3c:82:6a:3c:17:74:9a:be:
c8:84:9e:64:d8:66:f2:7f:d7:73:37:54:09:11:9b:88:a7:15:
1c:8a:b2:1c:d7:90:00:2a:00:23:11:59:d2:80:7a:64:3f:18:
39:ca:54:6b:90:89:cb:f2:30:ac:2d:d3:41:4b:6d:05:42:d9:
00:ea:3f:8e:f0:f4:b2:b1:26:d8:f0:68:cf:6d:ed:4e:39:23:
ed:b0:81:cf:69:5d:8b:de:b9:a1:d5:12:a2:97:62:1b:30:21:
50:e8:7b:71:dc:4a:ab:f2:7d:67:e4:d0:24:73:e6:51:dc:e3:
be:c2:70:b0:4b:30:f2:d4:f5:2a:d9:1c:d0:43:32:02:5b:bd:
7c:03:e3:eb:2c:9d:20:c4:5d:d5:2e:54:ea:92:44:59:0a:37:
9e:a7:4b:5f:a3:ff:f9:d0:24:d5:1a:df:69:52:06:4f:52:c6:
80:7d:11:87
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAaEq+chDWjUznI/3V560E9OcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5
ZWU2MjYwHhcNMjYxMDExMTIzOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWZiNGExMzIyYzE5MTQ4Y2JkZjk2NGUzMTNlNjAwZmYyZWE5NTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz0fhjKxcDhCw8YwJWIX5pxZD82/
qlQ9gx1Ivn10ZxfPcqz0PMgXAjyHxX4gxCwzfJFDXB3D5RZQy7LFp/E523UTSeNF
ybq/D3yzlHA51rW++a5vdVQcOTa6VZKoU7zRN62X+lJ3/VTN+9W3aGBOrvl9dOmW
LCA8XmjRe0WxO54mTNJP3ZLET5cydomNYsctuh36DM8XW3fAplYlw+qp4Pj+mbRe
YRDCoTd1hhj3gcpZPeQG/U9cgAXUsq+iUbt0Luv0eLoufC3HWEeyL52TTX4o5nDp
uQkx+5zpHqli/3Oki5vWcCS551QYCXtfmfULgLhTF0ud66nMAk3MgCsQowIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFOX7ShMiwZFIy9+WTjE+YA/y6pWcMB8GA1UdIwQY
MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt
NGFiOWU4YWEzMjYyLzEvNWZ0S0V5TEJrVWpMMzVaT01UNWdEX0xxbFp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy
LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQC1GSkMAwD
BALUZKwDBALUZLADBALUZLgDBADUZL0DBADUZL8wDQYJKoZIhvcNAQELBQADggEB
AA4w2685Nu+hEWsctGDGmAp32T3KEihCk9HW98grA9WkV4/z4sHK1Wg/mAcVTDzB
UTBH4GMsiKM2z9kzaJ2GMMq3azCTzM+dxB5U2cTwH4TsxC08gmo8F3SavsiEnmTY
ZvJ/13M3VAkRm4inFRyKshzXkAAqACMRWdKAemQ/GDnKVGuQicvyMKwt00FLbQVC
2QDqP47w9LKxJtjwaM9t7U45I+2wgc9pXYveuaHVEqKXYhswIVDoe3HcSqvyfWfk
0CRz5lHc477CcLBLMPLU9SrZHNBDMgJbvXwD4+ssnSDEXdUuVOqSRFkKN56nS1+j
//nQJNUa32lSBk9SxoB9EYc=
-----END CERTIFICATE-----
Generated at Wed Nov 4 14:26:16 2026 by rpki-client